webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Mida eFramework 2.8.9 – Remote Code Execution

# Exploit Title: Mida eFramework 2.8.9 - Remote Code Execution

2020-09-28 elbae webapps

B-swiss 3 Digital Signage System 3.6.5 – Database Disclosure

# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure

2020-09-25 LiquidWorm webapps

B-swiss 3 Digital Signage System 3.6.5 – Cross-Site Request Forgery (Add Maintenance Admin)

# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)

2020-09-25 LiquidWorm webapps

Anchor CMS 0.12.7 – Persistent Cross-Site Scripting (Authenticated)

# Exploit Title: Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)

2020-09-25 Sinem Şahin webapps

BigTree CMS 4.4.10 – Remote Code Execution

# Exploit Title: BigTree CMS 4.4.10 - Remote Code Execution

2020-09-25 SunCSR webapps

Visitor Management System in PHP 1.0 – Persistent Cross-Site Scripting

# Title: Visitor Management System in PHP 1.0 - Persistent Cross-Site Scripting

2020-09-24 Rahul Ramkumar webapps

Simple Online Food Ordering System 1.0 – ‘id’ SQL Injection (Unauthenticated)

# Exploit Title: Simple Online Food Ordering System 1.0 - 'id' SQL Injection (Unauthenticated)

2020-09-24 Aporlorxl23 webapps

Online Food Ordering System 1.0 – Remote Code Execution

# Exploit Title: Online Food Ordering System 1.0 - Remote Code Execution

2020-09-23 Eren Şimşek webapps

Flatpress Add Blog 1.0.3 – Persistent Cross-Site Scripting

# Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting

2020-09-22 Alperen Ergel webapps

Comodo Unified Threat Management Web Console 2.7.0 – Remote Code Execution

# Exploit Title: Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution

2020-09-22 Milad Fadavvi webapps

B-swiss 3 Digital Signage System 3.6.5 – Remote Code Execution

# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Remote Code Execution

2020-09-21 LiquidWorm webapps

Mida eFramework 2.9.0 – Back Door Access

# Exploit Title: Mida eFramework 2.9.0 - Back Door Access

2020-09-21 elbae webapps

Seat Reservation System 1.0 – ‘id’ SQL Injection

# Exploit Title: Seat Reservation System 1.0 - 'id' SQL Injection

2020-09-21 Augkim webapps

BlackCat CMS 1.3.6 – Cross-Site Request Forgery

# Exploit Title: BlackCat CMS 1.3.6 - Cross-Site Request Forgery

2020-09-21 Noth webapps

Online Shop Project 1.0 – ‘p’ SQL Injection

# Exploit Title: Online Shop Project 1.0 - 'p' SQL Injection

2020-09-21 Augkim webapps

Mantis Bug Tracker 2.3.0 – Remote Code Execution (Unauthenticated)

# Exploit Title: Mantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)

2020-09-18 Nikolas Geiselman webapps

SpamTitan 7.07 – Remote Code Execution (Authenticated)

# Exploit Title: SpamTitan 7.07 - Remote Code Execution (Authenticated)

2020-09-18 Felipe Molina webapps

Piwigo 2.10.1 – Cross Site Scripting

# Exploit Title: Piwigo 2.10.1 - Cross Site Scripting

2020-09-16 Iridium webapps

Tailor MS 1.0 – Reflected Cross-Site Scripting

# Exploit Title: Tailor MS 1.0 - Reflected Cross-Site Scripting

2020-09-15 boku webapps

ThinkAdmin 6 – Arbitrarily File Read

# Exploit Title: ThinkAdmin 6 - Arbitrarily File Read

2020-09-15 Hzllaga webapps

Joomla! paGO Commerce 2.5.9.0 – SQL Injection (Authenticated)

# Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)

2020-09-14 Mehmet Kelepçe webapps

RAD SecFlow-1v SF_0290_2.3.01.26 – Cross-Site Request Forgery (Reboot)

# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)

2020-09-14 Jonatan Schor webapps

RAD SecFlow-1v SF_0290_2.3.01.26 – Persistent Cross-Site Scripting

# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting

2020-09-14 Jonatan Schor webapps

Tea LaTex 1.0 – Remote Code Execution (Unauthenticated)

# Exploit Title: Tea LaTex 1.0 - Remote Code Execution (Unauthenticated)

2020-09-11 nepska webapps

VTENEXT 19 CE – Remote Code Execution

#!/usr/bin/python3

2020-09-11 Marco Ruela webapps

ZTE Router F602W – Captcha Bypass

# Exploit Title: ZTE Router F602W - Captcha Bypass

2020-09-10 Hritik Vijay webapps

CuteNews 2.1.2 – Remote Code Execution

# Exploit Title: CuteNews 2.1.2 - Remote Code Execution

2020-09-10 Musyoka Ian webapps

Tiandy IPC and NVR 9.12.7 – Credential Disclosure

# Exploit Title: Tiandy IPC and NVR 9.12.7 - Credential Disclosure

2020-09-10 zb3 webapps

Scopia XT Desktop 8.3.915.4 – Cross-Site Request Forgery (change admin password)

# Exploit Title: Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)

2020-09-09 V1n1v131r4 webapps

Tailor Management System – ‘id’ SQL Injection

# Exploit Title: Tailor Management System - 'id' SQL Injection

2020-09-09 Mosaaed webapps

ManageEngine Applications Manager 14700 – Remote Code Execution (Authenticated)

#!/usr/bin/python3

2020-09-07 Hodorsec webapps

grocy 2.7.1 – Persistent Cross-Site Scripting

# Exploit Title: grocy 2.7.1 - Persistent Cross-Site Scripting

2020-09-07 Mufaddal Masalawala webapps

Cabot 0.11.12 – Persistent Cross-Site Scripting

# Exploit Title: Cabot 0.11.12 - Persistent Cross-Site Scripting

2020-09-07 Abhiram V webapps

SiteMagic CMS 4.4.2 – Arbitrary File Upload (Authenticated)

# Exploit Title: SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)

2020-09-03 V1n1v131r4 webapps

Daily Tracker System 1.0 – Authentication Bypass

# Exploit Title: Daily Tracker System 1.0 - Authentication Bypass

2020-09-03 Adeeb Shah webapps

BloodX CMS 1.0 – Authentication Bypass

# Exploit Title: BloodX CMS 1.0 - Authentication Bypass

2020-09-03 BKpatron webapps

Savsoft Quiz Enterprise Version 5.5 – Persistent Cross-Site Scripting

# Exploit Title: Savsoft Quiz Enterprise Version 5.5 - Persistent Cross-Site Scripting

2020-09-03 Hemant Patidar webapps

Rukovoditel 2.7.1 – Remote Code Execution (2) (Authenticated)

#!/usr/bin/python3

2020-09-02 danyx07 webapps

Stock Management System 1.0 – Cross-Site Request Forgery (Change Username)

# Exploit Title: Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)

2020-09-02 boku webapps

moziloCMS 2.0 – Persistent Cross-Site Scripting (Authenticated)

# Exploit Title: moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)

2020-09-01 Abdulkadir Kaya webapps

Mara CMS 7.5 – Remote Code Execution (Authenticated)

# Exploit Title: Mara CMS 7.5 - Remote Code Execution (Authenticated)

2020-09-01 0blio_ webapps

CMS Made Simple 2.2.14 – Arbitrary File Upload (Authenticated)

#!/usr/bin/python3

2020-08-31 Luis Noriega webapps

Fuel CMS 1.4.8 – ‘fuel_replace_id’ SQL Injection (Authenticated)

# Exploit Title: Fuel CMS 1.4.8 - 'fuel_replace_id' SQL Injection (Authenticated)

2020-08-31 c0mpu7er webapps

Mara CMS 7.5 – Reflective Cross-Site Scripting

# Exploit Title: Mara CMS 7.5 - Reflective Cross-Site Scripting

2020-08-31 George Tsimpidas webapps

Online Book Store 1.0 – ‘id’ SQL Injection

# Title: Online Book Store 1.0 - 'id' SQL Injection

2020-08-31 Moaaz Taha webapps

Eibiz i-Media Server Digital Signage 3.8.0 – Privilege Escalation

# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation

2020-08-28 LiquidWorm webapps

SymphonyCMS 3.0.0 – Persistent Cross-Site Scripting

# Exploit Title: SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting

2020-08-28 SunCSR webapps

Nagios Log Server 2.1.6 – Persistent Cross-Site Scripting

# Exploit Title: Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting

2020-08-28 Jinson Varghese Behanan webapps

Online Shopping Alphaware 1.0 – ‘id’ SQL Injection

# Title: Online Shopping Alphaware 1.0 - 'id' SQL Injection

2020-08-28 Moaaz Taha webapps

WordPress Plugin Autoptimize 2.7.6 – Arbitrary File Upload (Authenticated)

# Exploit Title: Wordpress Plugin Autoptimize 2.7.6 - Arbitrary File Upload (Authenticated)

2020-08-27 SunCSR Team webapps